Legal

Privacy Policy

Last updated
22 August 2026

How MHLO Advert LTD collects, uses and protects personal data.

This Privacy Policy explains how MHLO Advert LTD (“the Company”, “we”, “us”, “our”) processes personal data collected through this website. We process personal data in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, “GDPR”) and applicable Cyprus data protection legislation.

Data controller

The controller responsible for the personal data described in this policy is MHLO Advert LTD, registration number HE487551, registered office Artemidos 19, Nicosia 2058, Cyprus.

We have not appointed a Data Protection Officer, as we are not required to do so under Article 37 GDPR. Data protection enquiries are handled by the Company and can be sent to [email protected], to the registered office above, or through the enquiry form in our contact section.

Personal data we collect

We only collect personal data that you provide yourself through this website.

Contact and enquiry form

When you submit an enquiry you provide your name, your email address, and any information you choose to include in the message field. You may also indicate, through a separate and unticked checkbox, that you wish to receive our newsletter.

Newsletter subscription

When you subscribe to the newsletter you provide your name, your email address, and optionally an indication of which subject area interests you. Subscription requires your explicit consent, given by ticking the consent checkbox.

Unsubscribe requests

When you use our unsubscribe function you provide the email address you wish to have removed from the newsletter list.

Server logs

Our hosting provider’s web server may record standard technical information as part of its normal operation, such as IP address, browser type and the time of a request. This is a function of the hosting infrastructure rather than something this website collects for its own purposes.

Cookies and analytics

This website does not set cookies of its own, and it does not use analytics, advertising or tracking technologies. Pages of this website load web fonts from Google Fonts; when your browser requests those files, the provider of that service necessarily receives your IP address and standard request information. No other third-party services are embedded in these pages.

We do not knowingly collect personal data from children, and this website is not directed at them.

Purposes and lawful basis

  • Responding to enquiries — to receive, assess and reply to a request about our services. Lawful basis: steps taken at your request prior to entering into a contract, and our legitimate interest in responding to business correspondence (Art. 6(1)(b) and 6(1)(f) GDPR).
  • Sending the newsletter — to send the technology newsletter you subscribed to. Lawful basis: your consent (Art. 6(1)(a) GDPR).
  • Handling unsubscribe requests — to remove an address from the list and record that the request was made. Lawful basis: legal obligation and our legitimate interest in demonstrating that consent was withdrawn (Art. 6(1)(c) and 6(1)(f) GDPR).
  • Operating and securing the website — to keep the website available and protect it from misuse. Lawful basis: our legitimate interest in the secure operation of our own systems (Art. 6(1)(f) GDPR).

Providing your data is voluntary. If you do not provide the information requested in a form, we may be unable to respond to your enquiry or to send you the newsletter.

Recipients and processors

We do not sell, rent or trade personal data, and we do not use it for automated decision-making or profiling.

Personal data may be accessible to our hosting provider and, where applicable, to an email service provider used to deliver the newsletter, each acting as a processor on our instructions under a written data processing agreement. Personal data may also be disclosed to professional advisers, or to competent authorities and courts, where we are legally required to do so.

International transfers

We aim to process personal data within the European Economic Area. Where a service provider processes data outside the EEA, we rely on an adequacy decision of the European Commission or on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses. You may request information about the safeguards applied by contacting us.

Retention

  • Enquiry correspondence is retained for as long as needed to deal with the enquiry and any resulting business relationship, and thereafter for the period required by applicable limitation and record-keeping rules.
  • Newsletter subscriber data is retained until you withdraw your consent, after which the address is removed from the mailing list.
  • Records evidencing consent and its withdrawal are retained for as long as necessary to demonstrate compliance.

Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure and loss, including transport encryption for this website and restricting access to those who need it. No method of transmission over the internet can be guaranteed to be completely secure.

Your rights

Subject to the conditions set out in the GDPR, you have the right to:

  • request access to the personal data we hold about you;
  • request rectification of inaccurate or incomplete data;
  • request erasure of your data;
  • request restriction of processing;
  • object to processing carried out on the basis of legitimate interests;
  • receive your data in a structured, commonly used and machine-readable format; and
  • withdraw your consent at any time, where processing is based on consent.

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. You can withdraw newsletter consent at any time through our unsubscribe page or by using the unsubscribe link included in each newsletter email.

To exercise any of these rights, contact us by email at [email protected], through the enquiry form in our contact section, or in writing at our registered office. We respond without undue delay and in any event within one month, which may be extended where permitted by Article 12(3) GDPR.

Complaints

If you consider that our processing of your personal data infringes data protection law, you have the right to lodge a complaint with a supervisory authority. In Cyprus this is the Office of the Commissioner for Personal Data Protection. You may also complain to the supervisory authority of your habitual residence or place of work within the EU.

Changes to this policy

We may update this Privacy Policy from time to time, for example to reflect changes in our processing or in applicable law. The date shown above indicates when it was last revised.

Contact

Questions about this Privacy Policy or about how we process personal data can be sent to [email protected], through the enquiry form in our contact section, or in writing to MHLO Advert LTD, Artemidos 19, Nicosia 2058, Cyprus.